CVE-2003-0971
GnuPG (GPG) 1.0.2, and other versions up to 1.2.3, creates ElGamal type 20 (sign+encrypt) keys using the same key component for encryption as for signing, which allows attackers to determine the private key from a signature.
Scoring
- CVSS base score
- 0.09
- EPSS probability
- 2.34%
- Published
- 2003-12-02
- Last modified
- 2026-03-16
Affected products
- n/a n/a